Online Access Free 5V0-41.21 Exam Questions

A customer has deployed NSX Intelligence appliance with an incorrect IP address.
What should the customer do to correct the IP address?

• A.Shutdown the appliance and change the vApp IP properties.
• B.In the CU, update intelligence manager node host-ip-addr.
• C.Add a new network interface to the appliance and replace the old one.
• D.Redeploy the appliance with the correct parameters.

A Security Administrator needs to update their NSX Distributed IDS/IPS policy to detect new attacks with critical CVSS scoring that leads to credential theft from targeted systems.
Which actions should you take?

• A.* Edit your Distributed IDS rule from Security > Distributed IDS/IPS > Rules
  * Filter on attack type and select Successful Credential Theft Detected
  * Update Mode to detect and prevent
  * Click on gear icon and change direction to IN-OUT
• B.* Update Distributed IDS/IPS signature database
  * Edit your profile from Security > Distributed IDS > Profiles
  * Select Critical severity, filter on attack type and select Successful Credential Theft Detected
  * Check the profile is applied in Distributed IDS rules
• C.* Edit your Distributed IDS rule from Security > Distributed IDS/IPS > Rules
  * Filter on attack type and select Successful Credential Theft Detected
  * Update Mode to detect and prevent
  * Click on gear icon and change direction to OUT
• D.* Create a new profile from Security > Distributed IDS > Profiles
  * Select Critical severity, filter on attack type and select Successful Credential Theft Detected
  * Check the profile is applied In Distributed IDS rules
  * Monitor Distributed IDS alerts to validate changes are applied

What is the NSX feature that allows a user to block ICMP between 192.168.1.100 and 192.168.1.101?

• A.NSX Distributed IDS/IPS
• B.NSX Distributed Switch Agent
• C.NSX Distributed Firewall
• D.NSX Distributed Routing

Information Security Management (ISM) describes a set of controls that organizations employ to protect which properties?

• A.confidentiality. Integrity, and accessibility
• B.configuration. Integrity, and availability
• C.confidentiality, interoperability, and availability
• D.confidentiality, integrity, and availability

An NSX administrator is trying to find the dvfilter name of the sa-web-01 virtual machine to capture the sa-web-01 VM traffic. What could be a reason the sa-web-01 VM dvfilter name is missing from the command output?

• A.sa-web-01 is powered Off on ESXi host.
• B.ESXi host has 5SH disabled.
• C.sa-web-01 VM has the no firewall rules configured.
• D.ESXi host has the firewall turned off.